Submission Details
Severity:
Token Get Stuck in RACCNFT Contract
Summary
Token used to mint the RACCNFT cannot be withdrawn.
Vulnerability Details
There is no way to allow the owner/seller of the RACCNFT in https://github.com/Cyfrin/2025-02-raac/blob/main/contracts/core/tokens/RAACNFT.sol to withdraw his Money. There is no function to get the money out of the contract which will result to the money get stucked in the contract.
Impact
The token used to pay for Buying the RACCNFT will get stuck in the RACCNFT contract.
Tools Used
manual review
Recommendations
It is advisable to add withdrawal function to withdraw the token for the seller/Owner of the RACCNFT.
Updates
Lead Judging Commences
inallhonesty 4 months ago
Submission Judgement Published Assigned finding tags:
RAACNFT collects payment for NFT minting but lacks withdrawal functionality, permanently locking all tokens in the contract
inallhonesty 4 months ago
Submission Judgement Published Assigned finding tags:
RAACNFT collects payment for NFT minting but lacks withdrawal functionality, permanently locking all tokens in the contract
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420 USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.